Kévin Chalet
|
978c398d7d
|
Introduce new constants
|
8 years ago |
Kévin Chalet
|
aa79131335
|
Introduce OpenIddictServerBuilder.SetRequestCachingPolicy()
|
8 years ago |
Kévin Chalet
|
bbf4c42057
|
Move the server and validation components to an .Internal namespace
|
8 years ago |
Kévin Chalet
|
ab34bdae2e
|
Update AddServer()/AddValidation() to throw an exception when the OpenID Connect server/OAuth validation handler are already registered and to prevent custom providers
|
8 years ago |
Kévin Chalet
|
a65deb4463
|
Update OpenIddictServerBuilder to allow calling SetAccessTokenLifetime/SetAuthorizationCodeLifetime/SetIdentityTokenLifetime/SetRefreshTokenLifetime with null values
|
8 years ago |
Kévin Chalet
|
99cebde3c3
|
Fix ApplyAuthorizationResponse/ApplyLogoutResponse to work with null requests
|
8 years ago |
Kévin Chalet
|
62ea117682
|
Store the token/authorization identifiers in new internal authentication properties
|
8 years ago |
Kévin Chalet
|
e9c796ca37
|
Throw an InvalidOperationException when SignIn() is called with an unauthenticated ClaimsIdentity
|
8 years ago |
Kévin Chalet
|
e7abdab60d
|
Update the token endpoint validation logic to reject scope=offline_access requests if the client application is not allowed to use the refresh token flow
|
8 years ago |
Kévin Chalet
|
5c40217da4
|
Replace the application provider/events by a new notifications-based system
|
8 years ago |
Kévin Chalet
|
7e10bedb73
|
Remove implicit permissions and introduce OpenIddictServerBuilder.IgnoreEndpointPermissions()/IgnoreGrantTypePermissions()/IgnoreScopePermissions()
|
8 years ago |
Kévin Chalet
|
8f9c6f109d
|
Enable scope validation and reject unidentified token/revocation requests by default
|
8 years ago |
Kévin Chalet
|
0e5b0cec66
|
Update exception messages to point to the new OpenIddict services APIs
|
8 years ago |
Kévin Chalet
|
aa89d0c215
|
Automatically validate the authorization associated with authorization codes/refresh tokens
|
8 years ago |
Kévin Chalet
|
f17db7496d
|
Update HandleConfigurationRequest to use the new HandleConfigurationRequestContext.Claims property
|
8 years ago |
Kévin Chalet
|
91d5592d55
|
Migrate to the latest aspnet-contrib packages
|
8 years ago |
Kévin Chalet
|
32fe4b0ae7
|
Remove OpenIddict.Models/OpenIddict.Stores and move to per-provider models
|
8 years ago |
Kévin Chalet
|
267a89a08c
|
Remove the non-standard external_providers_supported node from the discovery document
|
8 years ago |
Kévin Chalet
|
943e9578f3
|
Introduce OpenIddictServerBuilder.RegisterProvider() to allow registering a custom OpenID Connect server provider
|
8 years ago |
Kévin Chalet
|
92524d4371
|
Introduce OpenIddictServerDefaults and OpenIddictValidationDefaults
|
8 years ago |
Kévin Chalet
|
1c040c8279
|
Allow confidential applications to retrieve an identity token from the authorization endpoint for compatibility purposes
|
8 years ago |
Kévin Chalet
|
7bca2c06ed
|
Revamp the OpenIddict services registration process and introduce new builders to separate the server APIs from the core APIs
|
8 years ago |
Kévin Chalet
|
ef139e23d1
|
Move the default stores to OpenIddict.Stores and the server components to OpenIddict.Server
|
8 years ago |